Out-of-Bounds Read Vulnerability in AMD Compressonator SDK

CVE-2026-40652

What is CVE-2026-40652?

The AMD Compressonator SDK is subject to an out-of-bounds read vulnerability that arises when an attacker, possessing local access, manipulates a specially crafted Truevision Advanced Raster Graphics Adapter (TGA) file. This scenario may result in unauthorized disclosure of sensitive information stored in heap memory or may lead to system instability and denial of service. It is crucial for users to be aware of this security flaw to mitigate potential risks.

References